This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f6f286d-8d17-383b-942f-4bda90d37634.roa File: 8f6f286d-8d17-383b-942f-4bda90d37634.roa (raw, json) Hash identifier: DdfL3KI35v/aD05z/FevScpV85T/S/iQuxONP2yZp2w= Subject key identifier: 1C:F1:33:23:EF:BD:72:CC:65:C1:66:B6:A2:A6:8C:B5:28:F2:A9:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFD111CD32B9377DCCA65A400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f6f286d-8d17-383b-942f-4bda90d37634.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 22773 IP address blocks: 68.3.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:11:1c:d3:2b:93:77:dc:ca:65:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=23f4836d-4ba9-4053-a034-0ada7721c19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:78:9b:d1:3c:c8:e8:26:ea:ec:cd:a8:00:73: 63:cf:57:11:6d:cd:9c:33:c1:ed:d3:15:28:23:eb: 66:e7:a1:08:d8:89:0e:29:b4:67:57:24:a3:b1:e7: 7e:3e:d4:11:57:8e:18:14:39:91:64:2c:81:1a:26: f1:7a:b7:34:25:e9:b2:03:1e:b3:41:c8:eb:76:4d: 8d:be:49:06:52:22:2a:43:5d:5a:61:47:25:57:3b: 46:a5:df:72:af:29:f4:fa:43:5b:2e:fe:8f:6e:a7: ba:1c:7a:71:48:ab:ce:36:b4:8d:ac:86:b5:59:00: ff:01:92:5c:2d:db:f6:a4:74:a4:ba:66:4e:bb:29: 4d:86:25:bd:54:15:76:60:24:67:c5:af:73:ac:6a: d7:64:ec:ea:16:db:24:5b:7c:89:54:59:d0:d6:c8: 23:fb:a1:6d:bd:8d:a1:a4:fb:9b:b1:0b:52:66:95: 5f:72:39:3f:14:6d:e8:da:8b:97:c4:03:08:36:2f: 03:b0:59:db:bf:30:ce:02:cc:05:db:2e:64:95:19: c5:76:f5:4c:15:fa:5f:26:e7:62:99:9b:75:9e:9b: 7f:41:89:4d:76:92:59:eb:eb:f0:a5:e6:db:f1:a8: ca:cf:ab:1d:bf:55:77:05:61:91:05:7c:98:77:75: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F1:33:23:EF:BD:72:CC:65:C1:66:B6:A2:A6:8C:B5:28:F2:A9:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f6f286d-8d17-383b-942f-4bda90d37634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:72:b5:51:c3:14:a6:82:5e:bd:e7:1a:4d:82:92:19:51:6a: 05:8a:70:3c:b3:92:5d:e0:b0:b3:84:8a:99:86:9d:00:0b:58: 54:a1:34:68:6a:52:0c:62:f8:be:58:5c:36:8c:63:e3:3b:e6: 01:b5:a0:8a:f3:91:23:63:87:24:6d:e6:4b:08:0c:fe:31:87: f4:75:71:dc:dd:c9:44:96:9c:02:7d:77:19:b6:20:ca:c0:67: fc:e7:91:fd:f1:22:6f:59:2e:90:d9:5e:99:6c:fb:32:64:c4: 79:9b:d4:85:c5:7d:88:66:ac:f6:c7:19:60:53:a0:9b:d5:c6: e3:de:08:8f:81:d0:22:38:f9:dc:8c:75:62:9e:ad:07:ed:a5: e2:c4:e4:f3:8e:e2:fe:02:14:c6:b8:2e:86:1c:bb:01:dc:5f: a6:f4:58:05:fc:47:73:14:3d:93:36:28:3a:cf:c5:06:42:37: 89:4e:00:47:dd:3f:df:aa:56:db:66:b4:39:e8:f3:65:0a:0f: 2b:bd:72:8c:9a:af:ff:25:0e:a5:71:b8:b4:95:e9:f3:c7:89: 8a:37:b3:44:18:f5:fb:3f:2a:32:ad:26:3d:7c:9e:29:cc:ed: 60:16:3f:52:c0:73:45:00:ae:85:25:47:1e:9f:f1:3d:43:f1: 70:55:8f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ERzTK5N33MplpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk MjNmNDgzNmQtNGJhOS00MDUzLWEwMzQtMGFkYTc3MjFjMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXib0TzI6Cbq7M2oAHNjz1cRbc2cM8Ht0xUo I+tm56EI2IkOKbRnVySjsed+PtQRV44YFDmRZCyBGibxerc0JemyAx6zQcjrdk2N vkkGUiIqQ11aYUclVztGpd9yryn0+kNbLv6Pbqe6HHpxSKvONrSNrIa1WQD/AZJc Ldv2pHSkumZOuylNhiW9VBV2YCRnxa9zrGrXZOzqFtskW3yJVFnQ1sgj+6FtvY2h pPubsQtSZpVfcjk/FG3o2ouXxAMINi8DsFnbvzDOAswF2y5klRnFdvVMFfpfJudi mZt1npt/QYlNdpJZ6+vwpebb8ajKz6sdv1V3BWGRBXyYd3WjjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzxMyPvvXLMZcFmtqKmjLUo8qkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGY2ZjI4NmQtOGQxNy0z ODNiLTk0MmYtNGJkYTkwZDM3NjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJytVHDFKaCXr3nGk2CkhlRagWKcDyzkl3gsLOEipmGnQALWFShNGhq Ugxi+L5YXDaMY+M75gG1oIrzkSNjhyRt5ksIDP4xh/R1cdzdyUSWnAJ9dxm2IMrA Z/znkf3xIm9ZLpDZXpls+zJkxHmb1IXFfYhmrPbHGWBToJvVxuPeCI+B0CI4+dyM dWKerQftpeLE5POO4v4CFMa4LoYcuwHcX6b0WAX8R3MUPZM2KDrPxQZCN4lOAEfd P9+qVttmtDno82UKDyu9coyar/8lDqVxuLSV6fPHiYo3s0QY9fs/KjKtJj18ninM 7WAWP1LAc0UAroUlRx6f8T1D8XBVj0A= -----END CERTIFICATE-----Generated at Sat Dec 6 18:24:30 2025 by rpki-client